Privacy Policy for Harbor

Last updated: 2026-10-18

Introduction

Welcome to Harbor browser extension (the “Service”) operated by SanValley Lab (“us”, “we”, or “our”). This Privacy Policy explains how we handle information when you use our browser extension. We are committed to protecting your privacy and being transparent about our practices.

Summary

Harbor is a browser tab management extension that respects your privacy. We:

• Collect your email address only if you sign in with Google, to manage your Pro membership and Google Drive backup
• Do not use cookies
• Only store tab data when you explicitly choose to share
• Send tab titles to our AI provider only when you request AI grouping, without storing them
• Do not share data with third parties except the service providers listed below, or when you explicitly choose to make your collections public

Information Collection and Use

What We Don’t Collect

• Personal information beyond the account details described below
• Sensitive information, including payment card details
• Cookies
• Tracking data
• User behavior data

What We Process and Store

1. Temporary Processing (Without Storage):

   • Tab titles (not URLs) for intelligent grouping, sent to our AI provider DeepSeek
   • Only processed when you explicitly request grouping
   • Immediately discarded after grouping is complete

2. Shared Collections Data:

   • When you choose to share a collection, we store:
     • Tab titles & URLs
     • Collection information
   • This data is:
     • Only stored with your explicit consent
     • Stored securely in our database

3. Account and Membership Data (only if you sign in):

   • When you sign in with Google, we receive your email address and a Google account identifier.
   • If you also turn on Google Drive backup, Google gives us a token that only allows access to a hidden folder Harbor creates in your Drive (the drive.appdata permission). We store this token so your browser can back up and restore your collections. Your collections travel directly between your browser and Google Drive and never pass through our servers, and we cannot see any other files in your Drive. You can revoke this access at any time with “Revoke Authorization” in Harbor’s settings or in your Google Account.
   • We store them, together with your Pro membership status, to restore your membership on any browser or device.
   • If you entered a license key from an earlier Lemon Squeezy purchase, we store that key and check it with Lemon Squeezy.

Data Processing and Storage

Data Processing

• Temporary processing for tab grouping functionality
• Processing of shared collections data for public access
• No automated decision-making or user profiling
• No use of data for marketing purposes

Data Storage

• Most features operate without permanent data storage
• Shared collections are stored in our secure database
• You can delete your shared collections at any time(feature coming soon, right now you can contact us to delete your shared collections)
• We retain shared collection data until you choose to delete it or close your account

Third-Party Sharing

We do not sell data or share it for advertising. We share limited data only with these service providers:

• DeepSeek generates AI tab groupings. When you request AI grouping, our server sends the titles of the tabs in your current window to DeepSeek and returns the suggested groups to your browser. We do not store these titles, and we do not send tab URLs or account information to DeepSeek. See the DeepSeek Privacy Policy.
• Stripe processes Pro payments. Stripe receives your email address and the payment details you enter at checkout; we never see or store your card details. See the Stripe Privacy Policy.
• Google authenticates you when you choose to sign in, and stores your collections in your own Google Drive if you turn on Drive backup. Harbor’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Lemon Squeezy verifies license keys from purchases made before October 2026.

Security

We store as little personal data as possible and maintain strict security practices:

• Secure data transmission
• Immediate data disposal after processing
• Regular security assessments

Children’s Privacy

Our service is not directed at children under 13 years of age, and we do not knowingly collect or process data from children.

Your Rights

You have the right to:

• Access your data
• Correct your data
• Delete your data
• Opt-out of data processing
• Withdraw consent

Changes to This Privacy Policy

If we make changes to this Privacy Policy:

• We will notify you through the extension interface
• You will need to accept the changes to continue using the service
• If you don’t agree with the changes, you may discontinue using the service

Contact Us

For any privacy-related questions or concerns, please contact us at:

• Email: support@sanvalley.studio

Legal Compliance

We aim to comply with privacy regulations worldwide, including but not limited to GDPR, CCPA, and China’s Personal Information Protection Law. To access or delete your account data, contact us at the address above.

Consent

By using Harbor, you acknowledge that you have read and understood this Privacy Policy. Signing in with Google is optional and constitutes your consent to the account data processing described above.